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Abstract 

'- ' ■ In this paper, we consider the design of a new secrecy transmission scheme for a four-node relay-eavesdropper 

CN ' channel. The key idea of the proposed scheme is to combine noisy network coding with the interference assisted 

j^ , strategy for wiretap channel with a helping interferer A new achievable secrecy rate is characterized for both 

discrete memoryless and Gaussian channels. Such a new rate can be viewed as a general framework, where the 

^^O ■ existing interference assisted schemes such as noisy-forwarding and cooperative jamming approaches can be shown 

as special cases of the proposed scheme. In addition, under some channel condition where the existing schemes 

can only achieve zero secrecy rate, the proposed secrecy scheme can still offer significant performance gains. 

O ' Index Terms 

Relay-eavesdropper channel, information theoretic secrecy, noisy network coding. 

(N 

O, 

\Q I. INTRODUCTION 

in ■ 

fT^ ' Cooperation and secrecy are two important concepts which have been widely studied in wireless 

o" 

CsJ communications. Due to the broadcast nature of radio propagation, wireless transmissions can be over- 
L| ; heard by multiple unintended receivers. Such broadcasting nature facilitates cooperation by allowing 
\/ neighbor users to intelligently exploit the over-heard information but also leads to a serious security 
c3 problem such as eavesdropper attacking. 

Wyner studied the eavesdropping attack from an information theoretic aspect by introducing the concept 
of wire-tap channel in [fTl. Under the assumption that the wiretapper channel (source-to-wiretapper) is 
a degraded version of the main channel (source-to-destination), the secrecy capacity was established 
based on the rate-equivocation region concept. Csizar and Komer extended this degraded channel to the 
general wiretapper channel setup without any special assumptions, and found the secrecy capacity in [|2l. 
Recently, more types of multiuser networks have been studied in the context of secrecy communications. 
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The multiple access wiretapper channel (MAC-WT) is considered in [|3l, dH, where an external passive 
wiretapper was included. The multiple access channel with confidential messages (MAC-CM) is studied in 
im, O, where the source terminals act as eavesdroppers to each other. The works in [jTl, [HI investigate the 
broadcast channel with confidential messages (BC-CM) where both receivers wish to keep their message 
secret from the others. Similarly, []7], [|9] considered the interference channel (IC), where the former treated 
each unintended receiver as an eavesdropper and the latter introduced an external eavesdropper. 

To further enhance the secrecy level in the above mentioned channel models, user cooperation has been 
considered in dH, [|71, [fT0l - [fT7l , where [[T0l - [|T4l consider the untrusted helper scenario in which the relay 
node acts both a helper and an eavesdropper, and PI, [fT], flTSll- lfTTll consider cooperative communication 
systems with an extemal eavesdropper. Particularly for the latter scenario with a dedicated relay, such 
as the work in flU, [fT5l . [fT6 l| where the relay does not have its own message to be sent or received, 
so-called interference-assisted schemes that involve cooperative jamming [4] and noisy forward (NF) [|T5l 
techniques have been proved to be particularly useful to increase secrecy. The basic idea of these strategies 
is to allow the relay to send codewords (or even pure noisy) which are independent to the source message 
in order to confuse the eavesdropper. The work in [lT6l can be viewed as a generalization of this type of 
interference strategies for a wiretap channel with a helping interferer (WT-HI). On the other hand, [fTSl 
extended some classical relaying schemes for relay channels (such as Cover and El Gamal's decode-and- 
forward (DF) and compress-and-forward (CF) schemes flTSl ) to strength the main channel. It has been well 
known that, in comparison with DF, CF with independent coding at the relay is more suitable for a general 
scenario without a strong source-relay link. However, for the CF scheme in [fTSl . its lower bound on the 
equivocation rate is the same as the NF scheme. That is to say, the source information forwarded from 
the relay to the destination was shown in [fTSl not helpful to this four-node relay-eavesdropper channel 
compared to interference-assisted schemes. 

In this paper, we consider the four-node secrecy communication scenario with a source, a relay, a 
destination and an eavesdropper. The aim of this paper is to demonstrate that an effective use of the relay 
for source information forwarding can yield a larger achievable secrecy rate than the interference assisted 
schemes, whereas the existing relay secrecy protocol in [|T5ll can only achieve the same performance as 
the interference assisted ones. The key idea of our achievable scheme is to combine noisy network coding 
(NNC) [|T9l for relay channels with the interference-assisted scheme [fT6l for WT-HI. The proposed scheme 
is mainly facilitated by the fact that NNC can be used as an efficient tool to analyze the achievable rates 
of a large scale network, which is particularly useful for the addressed four-node secrecy network. But 
slightly different to decoding in [19], which did not involve uniquely decoding the relay message, we 
discuss how to decode the relay messages at the eavesdropper when the equivocation rate is commutated. 



As a result, we can obtain a larger achievable secrecy rate with more explicit expressions if compared to 
the traditional CF scheme in [15|. Furthermore, following stochastic encoding in [HI, [|2]|, random dummy 
information has been blended into the encoding procedure at the both source and relay, which ensures an 
effective application of NNC in secrecy communications. 

After the achievable rate of the proposed scheme is obtained, it is shown that the interference-assisted 
scheme in [fT6ll can be viewed as a special case of our proposed scheme when we ask the relay only to 
send information not related to the source message. When the relay-destination link is strong, we will 
show that the proposed scheme can exploit the capability of the dedicated relay node more effectively. 
That is to say, in this case, the relay can strength the condition of the main channel and suppress the 
wiretapper channel at the same time. It is interesting to observe that for some very strong eavesdropping 
cases, the proposed scheme can still achieve a positive secrecy rate, while the achievable secrecy rate 
of the scheme in lfT6l is zero. To further visualize the impact of our achievable cooperative scheme 
on secrecy, we extend the achievable secrecy rate to the Gaussian relay-eavesdropper channel based on 
Gaussian codebooks. Fixed power control is first used to obtain an explicit expression of the achievable 
rate, and the impact of power control on the secrecy rate is investigated by using computer simulations. 
Particularly the provided numerical results demonstrate that the use of power control can yield more 
performance gains for the proposed scheme compared to the scheme in lfT6l . For example, in the case 
of very strong eavesdropping to which the scheme in [[T6l can only achieve zero secrecy rate, a positive 
secrecy rate can be achieved with a moderate requirement of the relay-destination channel condition. 

The reminder of the paper is organized as following. Section II describes the channel model of the 
addressed relay-eavesdropper scenario. Section III states the achievable rate of the proposed secrecy 
transmission protocol, and some remarks by comparing the obtained rate to existing ones. Section IV 
provides the extension of the secrecy rate to the Gaussian relay-eavesdropper channel, where the impact 
of the power control will also be discussed. Conclusions are given in Section V. Proofs are collected in 
Appendix. Throughout this paper, (a;)+ denotes max(0, x). A sequence of random variables with time index 
i E [1 : n] := {1, ■ ■ ■ , n} is denoted as X" := {Xi, ■ ■ ■ , X„}. And X]j[ := {Xj, l<j<ior:i<j< n}. 

II. The relay-eavesdropper channel 

Consider a discrete memory less relay-eavesdropper channel with a source (Xi), a dedicated relay 
(Yr,X2), a destination (Yi) and a passive eavesdropper (Y2). This communication model consists of two 
finite input alphabets Xi, X2 at the source and relay respectively, three output alphabets y^, 3^i, 3^2 
at the relay, destination and eavesdropper respectively, and a channel transition probability distribution 
p{yr,yi,y2\xi,X2) where Xt E Xt, yt G X (t = 1,2) and yr E 3^r- The source wishes to send a 
confidential message Wi to the destination with the help of the dedicated relay, while keeping it secret 
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Fig. 1. The relay eavesdropper channel. 
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from the eavesdropper which knows the codebooks of the source and relay. We refer to such a cooperative 
communication model as the relay-eavesdropper channel, as shown in Fig. [T] 

The source intends to send a confidential message W\ E {1, ■ ■ ■ , M} to the destination in n channel 
uses. The memoryless assumption is imposed in the sense that at the i-th channel use the channels outputs 
(l/r,J5 yi,i, y2,i) only depend on the channel inputs (xi «, X2,j). A stochastic encoder for the source is specified 
by a matrix of conditional probabilities fi{xi^i\wi), where Xi^j G Xi, wi E Wi and ^^ ^^^ fiixi^i\wi) = 
1 for all z = 1, ■ ■ ■ ,n. The encoder at the relay maps the signals (2/r,i, 2/r,2, ■ ■ ■ ,yr,i~i) received before 
the i-th channel use to its output X2,i, using another stochastic encoder /2, which is described by a 
matrix of conditional probabilities /2(a;2,i|l/r~^)^2~^)' where X2,fe ^ •^2, (k = 1,- ■ ■ ,i), yj.^k ^ yn (k = 
1, ■ ■ ■ ,i — 1) and J2x2i£X2 hi^'^AVr^^ ^ ^2^^) — ^- The decoding function at the destination is described 
by a deterministic mapping (p: y^ — t- Wi. The average error probability of a {M,n) code is 

1 ^^ 
Pi") = — ^ Pr{4>{Y;') 7^ wi\wi was sent}. (1) 

Wl=l 

The secrecy level at the eavesdropper is measured with respect to the equivocation rate -H{Wi\Y2). 
A secrecy rate Rs is said to be achievable for the relay-eavesdropper channel if for any e > there exists 
a sequence of codes (M, n) such that 

M>2"^%Pi") <e, and 

Rs-e<-H{W,\Y,^) (2) 

n 

for sufficiently large n. 



III. An achievable scheme 

In this section we will present an achievable scheme for the relay-eavesdropper channel, which combines 
the NNC scheme for relay channel [|19L the random binning scheme for wiretap channels [[D. [I2j and 
the interference assisted scheme for WT-HI [[T6l . As shown at the end of this section, the achievable rate 
obtained in lfT6l can be viewed as a special case of the results obtained in this paper, by asking the relay 



to ignore the over-heard source information and only to transmit dummy messages. The equivocation rate 
achieved by the proposed secrecy scheme is given in the following subsection. 

A. Achievable secrecy rate 

Prior to the discussions of the achievable rate, we first give some definitions as: 

jf = i{x,,x^-Yt) + / (y;;Xi,r,|X2) , (3) 

where (t = 1, 2), and R{ is defined as a function of i?2 as 

Rf{R2) = max jmin [j (Xi; %, y^lXs) , jf - R^ , /(Xi; Yt)] . (4) 

Then our achievable secrecy rate is given by the following theorem. 

Theorem 1: The achievable secrecy rate Rg for the addressed relay-eavesdropper channel is 



Rs = max 

n,R2>Ii 



R^^\R2)-R?{R2 



(5) 



where n denotes the class of distributions 

p{Xi)p{x2)piyr, yi, y2\Xl,X2)piyr\yr, X2). 

Proof: refer to Appendix A. ■ 

To achieve the secrecy rate given in Theorem 1, the source and the relay cooperate with each other 
based on the idea of the NNC scheme, and the necessary randomness will be blended into the codebooks at 
both two transmitters in order to increase the secrecy level. Roughly speaking, a message is first generated 
at the source by mixing the confidential message with a random dummy message, where the redundant 
dummy part provides randomization in order to ensure the confidential part transmitted under the secrecy 
constraint. Then the source encodes this mixed message and sends it multiple times in multiple blocks 
using independent codebooks, which is different to the classical CF scheme in which a source message 
is first divided into multiple segments and then transmitted over multiple blocks. Meanwhile, at each 
block, the relay uses the NNC strategy without Wyner-Ziv binning to send the quantized observations 
obtained from the previous block. For many existing works, such as ifTSl . the relay observations are first 
compressed and then random binning is used to insert randomness into the system, where the two steps 
are performed over two separate stages. A key idea of the proposed secrecy scheme is to treat the size of 
the relay codebook as a parameter, where the dummy message is generated at the same time when the 
source message is compressed at the relay, and the amount of randomness injected into the system can 
be easily adjusted by changing this parameter. 



For decoding, the destination performs either special "joint" decoding according to NNC or simple 
separated decoding by ignoring the relay message. Specifically, when such "joint" decoding is performed, 
the destination utilizes the observations from the both source and relay, and simultaneously decodes the 
received signals from all the blocks without decoding the compression indices. Separate decoding simply 
aims to decode the source message by treating the signals transmitted by the relay as pure noise. Some 
remarks of the achievable scheme are given as follows. 



can be 



Remark 1: In Theorem 1, the first factor of R{ {R2), min / (Xi; 1^, Y'i|X2) , I2 — R 
viewed as a special case of the NNC achievable rate for the classical relay channel without security 
constraints [fT9l; R[ (-R2) denotes the redundancy rate sacrificed at the source, in order to protect the 
confidential message and confuse the eavesdropper; R2 denotes the data rate at the relay. Furthermore, 
for the rate R[ (-R2) given in dH), the first term in the max function, min / iXi, Yr, ^i|-^2 ) , -^2 -^2 , 
achieved by using the "joint" decoding strategy according to NNC; on the other hand, the second term, 
I{Xi; Yi), is achieved by using the separate decoding strategy. 

Remark 2: The separate decoding strategy at the destination corresponds to the cooperative jamming 
scheme in which the relay rate R2 is so large that both the destination and eavesdropper cannot extract 
any source information from the relay transmissions. This cooperative jamming is applied to the case 
that the relay-eavesdropper link is stronger than the relay -destination link, then the relay can hurts the 
eavesdropper more even though it attacks the destination. Note that this is different to the work in [[T9l 
for classical relay channel without secrecy constraint, which ignores the separate decoding and only needs 
to simply set R2 to larger than but arbitrarily close to Ji. 

Remark 3: As shown in the next subsection, the proposed relay scheme can achieve better performance 
than the interference assisted scheme in [[T6l which in turn has been recognized to realize better 
performance than the relay scheme [jTSl . Direct comparison between the two relay schemes is difficult due 
to the complicated expressions of two achievable rates. The reason for such a performance improvement 
is due to the use of NNC, where NNC is ideal for the analysis of large scale networks and therefore can 
facilitate the calculation of a better equivocation rate. 

B. Special cases 

In this subsection, we will present several special cases to show the superiority of the proposed 
achievable scheme in comparison with the interference assisted schemes in [[TSl . lfT6l . 

1) Disable the channel output Yj.: If we disable the received signal Yr at the relay by setting Yr = 0, 
the channel model reduces to WT-HI in [16], and the achievable rate becomes 



Rs,[Hi]= max |i?;^j)^,](i?2)-i?l'^j^,](i?2)} 



where i?|*{^^j(i?2) = max{mm[/(Xi; FilXa), /(X1X2; Yt)-R2], /(Xi; Yt) with t = 1,2. So the achievable 
equivocation of the proposed scheme would be at least as good as the one in [fT6ll in any case. 
2) Very strong eavesdropping: Following [16,| . we define this case as 

/(Xi; 1^2) >/(Xi; 111X2) 

for all distributions of pixi)p{x2)p{yr\yr,X2)- For such very strong eavesdropping as shown in Fig. |2] 
the helping interferer scheme in [16| cannot achieve a positive secrecy rate as given in Eq. (14) of [16|. 
However, the secrecy rate of the proposed scheme can be lower bounded as 



R^ ih = max < min 



/(Xi;y;„vi|X2)-/(Xi;r2) 



r(l) _ r(2) 

-'2 -'2 ! 



(6) 



/(Xi,X2;ri)-/(i;;i;|Xi,X2,ri)-/(Xi;r2) 

where the lower bound on the right side is obtained by choosing R2 = R2 with i?2 = 
max{/i, J(X2; y2|Xi) + /(Fr; Xi, F2IX2)}. From Fig. |2l one can see that a non-zero secrecy rate Rg 
can still be achievable in this case. This is because the use of the relay can strengthen the main link and 
suppress the wiretapper link at the same time. 

3) Extremely strong eavesdropping: This case is referred to 

/(Xi; 1^2) > min |/(Xi;y;, 111X2), /(Xi,X2;Fi)-/(y;;F,|Xi,X2,Fi)} 

for all product distributions of p{xi)p{x2)p{yr\yr, X2), where the term at the right side of the above equality 
is from (HI) by setting R2 = h- The proposed scheme cannot achieve any positive secrecy rate, the same 
as the scheme in [16J. 

Note that the use of the channel prefixing technique in [l2l may further enhance the performance of 
the proposed scheme, but we do not consider this prefixing method in this paper due to the intractable 
evaluation of its performance. 

IV. Gaussian relay-eavesdropper channel 

In this section, a discrete memoryless Gaussian relay-eavesdropper channel is considered, where the 
channel outputs at the destination, eavesdropper, relay can be expressed as [|T6l 

11 = X, + VbX2 + Zi, 

¥2 = v^Xi+X2 + Z2, 

Yr = y^Xi + Zr, (7) 
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Fig. 2. Illustrations of the functions R[ {R2) and 7?^ (^2) versus relay rate i?2(> h) for the very strong eavesdropping case 
(i.e. I{Xi;Yi\X2) < I{Xi;Y2)), where I3 = /(X2;y2|Xi) + /(Fr; Xi, F2IX2), -R2 = maxj/i./a}. Case i, ii, m denotes 
i?s,!6 = /(Xi;y,,yi|X2) -/(Xi;r2), 4'' -/f\ /(Xi,X2;yi) -/(Y;.;yrlXi,X2,yi) - J(Xi;y2) in ©, respectively. 



where Zi, Z2, Z.^ are i.i.d. zero-mean Gaussian random variables with unit variance, a, b, c are channels 
gains. The transmit power of the channel inputs Xi and X2 are constrained by 



ii:£|xfJ<A,i$:£[At.l<A. 

i=l j=l 



(8) 



A. Achievable secrecy rate 

Applying Theorem 1 to the Gaussian case given by (|7]), the following theorem can be obtained. 
Theorem 2: For a Gaussian relay-eavesdropper channel, when fixing the transmit powers at the source 
and relay as < Pi < Pi and < P2 < Pi, the following secrecy rate is achievable 

P,(Pi, P2) = max{P^(Pi, P2), Pf (Pi)} (9) 

where Pf(Pi,P2) is 

' ^ (^1 + TTarg^H^) - ^ (irfe) ' if &> i + (i + c)Pi 



Ri{Pl^P2)={ 



c)Pi+bP2^ 

C (Pi + 6P2) - C (aP, + P2) 



C 



l+bP2 



c 



aPi 

I+P2 



if 1 < 6 < 1 + (1 + c)Pi 
if 6< 1 



(10) 



and i?f (Pi) = [C{Pi) - C{aPi)]+ with C{x) = \ log(l + x). 

Proof: refer to Appendix C. ■ 

Remark 4: When h < 1 + Pi, the achievable secrecy tare in Theorem 2 is the same as the one in 
Theorem 3 of [[T6l . However, when 6 > 1 + Pi, it can be easily proved that the proposed scheme strictly 
outperforms the latter one. This is mainly because, when the relay-destination channel is sufficiently strong, 
the main channel becomes a bottleneck for the interference assisted scheme without relaying the source 
message, whereas the proposed scheme can efficiently improve the main link by relaying the quantized 
source message. 

Remark 5: For the Gaussian relay-eavesdropper channel, power control can be used to further enhance 
the achievable secrecy rate in Theorem 2. Under certain conditions, the secrecy rate is not necessarily 
maximized at Pi = Pi and P2 = P2. Loosely speaking, in some situations, larger source power Pi and 
relay power P2 may enhance the eavesdropper's decoding capability more, or bring more interferences to 
the destination. Or in other words, the maximum power transmission does not always result in a larger 
equivocation rate. Then power control can play an important role for secrecy transmission and change the 
achievable secrecy rate in Theorem 2 into 

Rs= max Ri{PuP2), 

0<Pl<Pl,0<P2<P2 

where Pf^ is redundant and can be ignored when power control is applied since it can be viewed as a 
special case of Pf by setting P2 = 0. Following those steps in Appendix D of lfT6l . the optimal solution 
of power control can be obtained. Due to the space limit, we will only rely on the computer simulations 
in this paper to show the performance of the proposed scheme with power control as shown in the next 
numerical sections. 

B. Numerical results 

In Fig. [3l the achievable secrecy rates for the proposed scheme are shown as a function of the relay- 
destination channel gain b. We set the source-eavesdropper channel gain as a = 1 or a = 6 respectively, 
the capacity of the eavesdropper channel without the relay is zero. The interference assisted scheme in [16] 
and the upper bound obtained in Theorem 1 of [[TSl have also been shown in the figures for comparison. 
Interestingly, one can see that the performance of the proposed scheme is the same as the one in lfT6l for 
6 < 1 and outperforms it when b > 1. Such a performance gain can be further enlarged for a large a as 
a = 6, which is the very strong case as discussed above. It means that the proposed scheme obtains more 
helps from the power control compared to the scheme in [|T6l . where the use of power control makes 
it more likely that the proposed scheme outperforms the comparable one in [fT6l . even with moderate 
channel conditions. As can be seen from the Theorem |2l the condition to ensure that the proposed scheme 
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achieves a better performance than the comparable one is 6 > 1 + Pi. By applying power control, the 
value of the source transmission power Pi is not necessarily to be the maximum Pi, which brings the 
benefit that the requirement to the relay-destination channel gain b is reduced. 
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Fig. 3. Achievable secrecy rate for different schemes for a relay channel versus b (the relay destination channel gain), where c = 0.8 and 
the power bounds are Pi = P2 = 5. 



V. Conclusion 

In this paper, we have focused on the four-node relay-eavesdropper channel, and developed a new form 
of the achievable secrecy rate for such a scenario. The key idea of the proposed scheme is to combine 
noisy network coding with the interference assisted strategy for wiretap channel with a helping interferer. 
Facilitated by these techniques, the secrecy rate achieved by the proposed scheme was characterized for 
both discrete memoryless and Gaussian channels. Such a new rate can be viewed as a general framework, 
where the existing interference assisted schemes such as noisy-forwarding and cooperative jamming 
approaches can be shown as special cases of the proposed scheme. In addition, under some channel 
condition where the existing schemes can only achieve zero secrecy rate, analytic and numerical results 
have been provided to show that the proposed secrecy scheme can still offer significant performance 
gains. The impact of power control on the secrecy rate has only been analyzed by relying on computer 
simulations, where a promising future direction is to carry out the study for the optimal design of power 
control and allocation for the addressed relay-eavesdropper scenario. 

Appendix A 
Proof of Theorem 1 

Codebook Generation: Fix p{xi)p{x2)p{yr\yr,X2). A codebook for each block is randomly and 
independently generated. Let xi^ = (a;i (j_i)„+i, ■ ■ -Xi ,,„), j E [1 : B]. So are the definitions of X2j, 
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yij) y2j5 Yrji Yrj- 

For each j G [1 : -B], randomly generate 2"^^^ n-sequences xij, each according to the distribution 
nr=iP^i(^i,(j-i)n±«)- These 2"^^^ codewords are then randomly grouped into 2"^^i''' bins each with 
2nBiJi,„ codewordJl Ri = /?i,, + Ri^o- Index them as ^ij{wi,w[), wi e [I : 2"^^i--], w[ e [1 : 2"^^i>°]. 
Then randomly generate 2"^^ ^-sequences X2j(/j_i), /j_i G [1 : 2"^^] (/^ = x)^ g^ch according to 
YYi=iPx2i^2,{j-i)n+i)- For each X2j(/j-i), randomly generate 2"-^2 ^-sequences yrj{lj\lj-i), Ij G [1 : 2'^^'^], 
each according to nr=iPi>.|X2(^^,(i-i)"+il^2,o-i)n+i(^j-i))- 

Hence the codebook is defined as 

Cj = {yiij{Wi,w[),X2j{lj-l),yrj{lj\lj-l) ■ 

Wi G [1 : 2"^^!-],^; G [1 : 2"^^^-],/^ G [1 : 2"^^]} 
for j E [I : B], (Iq = 1). Besides, set the rates for Ri and R2 as 

i?i < max < min 



(11) 



-^ ( -^1; Y'r, ^1 1^2 ) 5 -^2 ~ R2 



/(Xi;Yi: 



where Ji and I2 are defined in (JS]), 6{e' — )• 0) as e' — )• 0. 

Encoding: The encoding processes at the source and relay are shown as follows: 

• To send the confidential wi E [1 : 2"^^i>=], the source randomly chooses a dummy message w[ E [1 : 
2nBi?i,oj ^^^ (-j^gj^ sends xij(wi,w[) at block j. Meanwhile, the relay transmits X2j(/j_i) in block j. 

• The relay, upon the received sequence y^j at the end of block j, finds an index Ij such that 
(yj.j(Zj|/j_i),yrj, X2j(/j_i)) G 7^/ . If there exists more than one such qualified index, uniformly 
select one of them at random. Besides, if there doesn't exist such an index, randomly choose an 
arbitrary index from [1 : 2"^^] 

Decoding: Let e > e'. At the end of block B, the destination declares that Wi is received if 



1) ("joint" decoding of NNC) :>lij{wi,w[] 



IS 



the only codeword such that 



{xij{wi,w[),:>C2j{lj-i),yrj{ij\lj-^i),yij) E Te"^^ for all j E [1 : B] for some h, ■ ■■Ib; or 
2) (separate decoding) :s.ij{wi,w[) is the only codeword such that {-xij{wi,w[),yij) E Te for all 
J G [1 : B]. 
The destination makes an error if neither 1) nor 2) occurs, or if there exists more than one such t&i-index. 

l(xrX,YAX2)j^2^ -R. 



For any rate pair (i?i, R2) given in (fTT|) . we have i?i < min I f Xi; F^, ^i|-^2) , I2 ~ ^2 or Ri < 
I{Xi; Yi), which is subjected to the constraint in Section III of |fT9l or the constraint of separate decoding. 
Therefore, the intended receiver can decode Wi with an arbitrarily small probability of error using either 

'Note that the parameters _Ri, Ri,o correspond to R\ {R2) and Ri {R2) in &, respectively 
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the "joint" decoding strategy according to NNC or the separate decoding way, as long as n and B are 
sufficiently large. 

Equivocation Computation: The parameter Rio is different for each of two cases (i.e. Case I and 
Case II) depending on the code rate R2 at the relay. From dU and the perspective of the eavesdropper, 
in Case I, leu h < R2 < I{X2;Y2\Xi) + I{Yr;Xi,Y2\X2), which corresponds to the situation 
Rf^ = min [/ (^Xi; F,, ^21^2) , I^ - ^^2] ; in Case II, let R2 > /(X2; Fal^i) + !{%; ^i, ^"21X2), which 
corresponds to the situation R[ ' = I{Xi; Y2). Now the equivocation will be lower bounded according to 
the i?2 value as two following subsections. 

A. Case I: (/i < R2 < /(X2; ^21^1) + !{%; ^i, 1^21^2)) 
Set the rate parameter for Rio as 

Ri^o = mm{I{Xi; %, ^21^2), jf - R2} - ei. (12) 

In the following analysis, X"^- denotes (Xi^(j_i)„+i, ■ ■ ■ ,Xij>i), j G [1 : B], then Xf" = 
(Xi,i,--- ,Xi,B„) = (X{\,--- ,Xi"b), and X^^.^ denotes the set {X]\, 1 < k < j ox j < k < n}. 
So are the definitions with respect to the other variables such as X2, F2, Yr. The equivocation at the 
eavesdropper is lower bounded as 

if(iyi|r/") > HiWilYi'^LB) 

= HiWi,Yf^\LB) - HiY,^^\LB) 
= H{Wi,X^\X^\Yf'',Y^''\LB) 

-if (Xf ", Xf ^ Yf''\Wi, Y^"", Lb) - HiY^''\LB) 
= iJ(Xf ", X2^", YJ^'^ILb) + H{Wi, r2''"|^f ", Xi"", Y^^, Lb) 

-if (Xf ", X2^", Yf'^lWi, Y^"", Lb) - HiYf'^lLB) 
> H{X^'\ Xf ", F/") - H{Lb) + H{Yf''\X^'^, Xf ", Yf"") 

-ii(Xf '^, Xf '^, Yf'^lWi, ^2^", Lb) - HiYf""' 



■2 ; 
= ii(Xf ") - H{Lb) + ii(X2^", 1;^") - /(Xf "; X2^", 1;^") 

-/(Xf ", X2^", F/"; Fa""") - i^(Xf ", Xa^", Yf'^lWi, Y^'^ , Lb) (13) 

Now let's calculate the six terms separately in the following subsections. 
1) The first and the second term: 

HiX^"") = nBRi = nB{Ri,s + Ri,o) 
H{Lb) < log2"«^=ni?2, (14) 

^Note that if h > /(X2; y2|-'i^i) + I{Yr; Xi, V2|-'f2), Case I does not exist, and we only need to consider Case II. 
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2) The third term: Since a block Markov encoding is used, and Li — L2 ■ — Lb is a Markov chain. 

So it can be calculated that 

B 
B 

= Y.H{L,\L,^,), (15) 

In order to obtain the lower bound of H{Lb\Lb-i), let's first present a lemma as following. 

Lemma 1: For any j G [1 : B] and lj-i,lj E [1 : 2"-^'^], let p(/j|/j_i) denote Pl |l _i(^jKj-i) for 
simplicity, the conditional probability mass function p(lj\lj_i) can be upper bounded as 

Pilj\lj-i) < 2-"(^^-2'5(^')) (^ + exp {- ((1 - e')2"(^^-^^-^(^'»-3 _ ^(^^^ - 26{e')) ln2) }") . (16) 

Proof: refer to Appendix B. ■ 

Therefore, by using the above lemma, H(Lj\Lj_i) can be bounded as 

= nR2-n{25ie') + Siin)), (17) 

where (5i(n) = Mog (^z^ + exp {- ((1 - e')2"(^2-/i-5(e'))-3 _ ^(^^^ _ 25(e')) ln2) }) ^ as n ^ oo 
since -R2 has been constrained in (fTTI) . Recalling (fT5l) . we can obtain 

i7(X2^", Yf") > nBR2 - r25(25(e') + 6i{n)). (18) 

3j The fourth and fifth terms: The fourth term in (fTST ) can be upper bounded as: 

TlvBri. vBn \rBn\ \ ^ TlvBn. vn "(V?i|\^U~l)" "(^(7 — l)nN 



B 



= J]{/(xf"; t;j|X2';.,x(^-'^",y;(^-i)'^) + /(xf";X2?,.|x(^-')",i;(^-i)")} (i9) 

(a) ^ 
B 

Y,{H{Y-\X-^) - H{Y-\X-^,X-^)} 



B 

(b) 
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where (a) follows removing conditioning and the fact that the second term in ([19] ) is zero since X^ is a de- 
terministic function of y;"^„i, Xsj-i; (b) follows the fact that Y;^: - {X'^j,X^j} - {Yr^^'^^"", X^^"^^", X^^.^} 
is a Markov chain, since the channel is memoryless and the codebook for each block is independently 
generated. Besides, the fifth term can be upper bounded as 

B 

^Bn yBn v^n. \rn\\r{3~^)n^ 



Tfs^Bn vBn -{/■ Bn . -\/- Bn\ \ ^ T/vBn \^Bn iV-Bn. v^n |vaU~1)"\ 

-'l-^l 5-^2 5 -J^r 1 ■'^2 ) — 2^ -'1^1 5^2 7->^r ■>^2j\^2 ) 

i=i 

B 

< Y.^H{Y^^ - H{Y^\Xf\ Xf ", t^\ Yt'^'')} 



B 

= Y.^H{Y^^ - H{Y-\X^^, Xl^, Y-^ 
i=i 

B 

— \ ^ T{ IT" IT" V"- V"^ 

i=i 
where (a) follows from the fact that ^2^ - {^i" , X^j, Yr'j} ~ {^2^~^^", ^I]j[, X^]j[, Yr]j[} i^ a Markov chain. 
Using the above two results, we can bound the sum of above two terms as 

Q T/ \rBn \rBn \rBn\ , j ( \^Bn \rBn \/'Bn -\/-Bn\ 

'-'4,5 — -'1^1 1^2 5 -^ r J +-'1-^1 5-^2 5 -^ r i -^ 2 ) 

B 

< E[^(^i" ' ^n 1^2" ) + /(^i" , ^2" , n"; ^2")] 
= 5^[/(x[;., X2- y^") + /(:^. •; xj;, y-\x^^)] 

< J]n[J(Xi,X2;F2) + /(^,;Xi,F2|X2) + (52H]. 



On the other hand. 



- 2^1-' l^lj) -^rj) -^2il^2iJ + ^ \^2j^ -^rj' ■^2iJj 

i=i 

B 

< 5^n[/(Xi;y;,F2|X2) + i?2 + <52(n)]. 



i=i 



Therefore, we have 



^4,5 < nB{Ri^o + R2) + nB{ti + (52(n)), (20) 



where Rio is defined in (1121) . 



15 

4) The last term: Now let's bound the last term i7(Xf",Xf", F/^lPFi, F/", Lb). Fix Wi = Wi and 
Lb = h, and assume that the source sends a codeword xij(wi,w[) and the relay transmits X2j(/j_i) at 
each block j E [I : B]. Since Xf " is determined by two indices wi, w[ and (X^", 1^^") are determined 
by B indices (/i, ■ ■ ■ , Ib), the eavesdropper only needs to do joint decoding of w[ and (/i, • ■ ■ , Ib-i) at 
the end of block B with the side information that Wi = Wi and Lb = h- Specifically, for any e > e', 
given Wi = Wi and Lb = Ib, the eavesdropper finds the unique index set {w[,li, ■ ■ ■ ,Ib~i} such that 
{-}Cij{wi,w[),:s.2j{lj-i),yrj{lj\lj-i),y2j) e Te for all j G [1 : B]. The eavesdropper make an error if 
there exists none or more than one such index set. 

Analysis of the error probability: Given Wi = Wi and Lb = Ib, assume without loss of generality that 
W{ = 1 and Li = ■ ■ ■ = Lb = 1 are sent. Then the eavesdropper makes an error only if at least one of 
the following events occur: 

£^ = {{Yrj{lj\l), X2j(l), Y,j) tP for all Ij e [1 : 2"^^] for some j e[l:B]} 

62 = {(XyK,l),X2,(l),Y,,(l|l),Y2,)^7;(")forsomejG[l:fi]} 

£3 = {(XyK,K),X2,(/,_i), Y,,(/,|/,_i), Y2,) G ?;(") for all j for some l''-\w[ ^ 1} 

£4 = {(XyK, l),X2,(/,_i), Y,,(/,|/,_i), Y2,) G ?;(") for all j for some /^-^ ^ 1^-^} 

Thus the error probability can be bounded as 

P{e) = P{enei) + P{enel) 

= P{enei) + P{{e2Ue3Ue4)ne'i) 

= P{e nei) + P ((£2 n el) U (£3 n el) U (£4 n el)) 

< P{ei) + P{e2 n el) + P{e3 n el) + P{e^ n el) 

< P{e,) + P{e2nel) + P{e3) + P{e^). (21) 

From [19], one can see that the first three terms goes to as ra — )■ 00 since we have constrained the rate 
pair {R2,Ri,o) in (fTTI) and (fT2l) . For P(£:4), define the events 

£,(i,/,_i,/,) = {(XyK,i),x2,(/,_i),Y,,(/,.|/,_i),Y2,) G ?;(")}, 
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and then 



< Yl nnf=ie,(i,/,_i,/,)) 

iS-l^lS-l j=l 

B 

where (a) is due to the fact that the codebook at each block j E [1 : b] is independently generated and 
the memoryless channel is considered. Note that if w[ = 1 and /j_i ^ 1, (X2j(/j-i), Yrj(/j|/j_i)) ~ 
nr=iPx2,y.(^2,{i-i)n+i,yr,o-i)n+i) IS independent of {Xij{wi,l),Y2j). So by the joint typicality lemma 
( [201, Lecture Note 2), for w[ = 1 and Ij^ij^ I, 

E P(x2j,yri)p(Xlj,y2j) 

(Xlj ,X2j Srj ,y2j)&% 

^ 2-n{H{Xi,Y2)+H{X2,Yr)-HiXi,X2,Yr,Y2)-Sie)) 

— 2~"(^3~''('^)) (23) 

where 1 3 = /(X2, 1^; Xi, F2) = -^(-^2; ^2|-^i) + -^(^r; -^i^2|-'^2)- If conditioned on that the binary sequence 
l^~^ has k{k G [1 : P — 2]) Is, from the above result we have 

B 

JJP(£,(l,/,_i,/,)) < 2-"(^-i-'=)(^3-5(.))_ (24) 

i=2 
Hence substitute the above result to (|22l) and obtain 

s 
P(^4) < 5^ l[P{e,{l,l,^„l,)) 



iB-ljLlB-l j=2 

B-2 / r^ _ A 

< y^ 2"(^"l"'')^22-'^(-B-l-fc)(/3-<5(<:)) 



fc=0 
B-l 
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where i = B — I — k and ao = I^ — R2 — 5(e). Note that Oq > since Case I is considered here. Let 

Ui= \ 2-"*"", then 

k ) 

Uj i + 1 

for 1 <i < B -2. Hence u, < ui{{B/2 - i)2-"«o)*-i for 1 < i < B - 1, where m = {B - l)2-"'^o. 
Therefore 

^^^ / r) -\\o—naQ 

PieA <(B- 1)2""'^" y^iiB/2 - i)2-""«)'-i < \ , ' . 

V 4; - V ; ^w I I ) - ^_ ^^^2 _ i)2-"«o 

Therefore, the error probability P(e) goes to if n is sufficiently large. From Fano's inequality, we have 

nB 

nB 

< ^ (1 + P(e)(log2"^^^'° + {B-l) log2"^2)) 
nB 

= Un). (25) 

Thus the last term can be bounded as 

-^H{X^\ Xi\ Y^^\W^, Y^, Lb) 
nB 



J2 piwulB)H{X^'',Xt,Yf''\W, = w,,Lb = lB,Y,^n 



wi A 



i/s 



< 53{n). (26) 



By combining ([T3]) with (O, UB, (EQl) and UB, we get 

4ji^(W^i|>^2''") > Ri,s - § - 25(e') - 5,in) - ei - 52(n) - ^sln). (27) 

By letting B -^ 00, the equivocation is approaching to the secrecy rate. 

B. Case II: (i?2 > HX^; Y^lX^) + /(f,; Xi, F2IX2)) 

This proof can be completed by following the similar steps in Case I and lfT6l . First the rate parameter 
for Rio is chosen as 

i?i,o = /(Xi;F2)-ei. (28) 

To prove the rate for CASE II, the relay uses a similar binning procedure as the the source. For each 
j E [I : B], the 2"^^ codewords are randomly grouped into 2"^2 bins each with 2"^2 codewords, hence 
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R2 = R'2 + R'i- So that the index of each codeword can be equivalently expressed as Ij = (/', /''), where 
I'j e [1 : 2"-^2], I] G [1 : 2"^2]. To simplify the proof, we set 

R'^ = /(X2; Y2\X,) + !{%■ Xi, F2IX2) - £2. (29) 

Then following the steps in (fT3l) and let (L')^^^ = {L'^, ■ ■ ■ , L'^_j^}, the equivocation can be bounded as 

H{W,\Yf-) > H{W,\Yf\LB,{L'f-') (30) 

> H{x^'') - h{Lb, {l')^'^) + if (X2^", y;^") - /(xf "; X2^", y;^") 

where i7(Xf") = nS(i?i,, + i?i,„), H{Xi'\ i;^") > n5i?2 - nB{26{e') + (5i(n)) as shown in ^. The 
second term can be bounded as 

B-l 

H{Lb, {L')''-^) < H{Lb) + Y, H{L'^) < nR2 + n{B - l)R'^. 

i=i 
Besides, from (|20l ), the sum of the fourth and the fifth terms is 

C Tf vBn. \^Bn \/'Bn\ < j( \^Bn \^Bn vBri. \^Bn\ 

^4,5 — -'l-^l 1-^2 ' -^ r J +-'1-^1 5-^2 ' -^ r '■'^2 J 

< n5[/(Xi, X2; F2) + /(y;; Xi, 1^21X2) + (52(^)]. 

= nB[Ri,o + R2 + ei + e2 + 62{n)]. (31) 

To bound the last term iJ(Xf",X|^", y;^"|W^i, Kf", L^, (L')^"^), the eavesdropper only needs to do 
joint decoding of W[ and {L'(, ■ ■ ■ , L"^} at the end of block B assuming that Wi, Lb and {L')^^^ are given 
to it as side information. Similar to the analysis of the last term in Case I, for the rates (i?2, -Ri.o, -^2) 
constrained in (fTTT ). (l28l) and (|29] ). it can be shown that the error probability is arbitrarily small for 
sufficiently large n. Hence we have 

-^H{X^\Xi\Yf''\W^,Y2'''',LB,iLY-') < hin). 
nB 



Substituting the above results into (pOl) . the equivocation can be bounded as 

-^H{W,\Yf'') > Ri,s - § - 26{e') - 6i{n) - ei - 62 - 62(71) - 6s{n). (32) 

nB B 

Again by letting _B — ;■ 00, we can show that the equivocation is approaching the secrecy rate. 
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Appendix B 
Proof of Lemma 1 

To upper bound the conditional probability mass function p{lj\lj_i) for any j E [1 : B] and lj-i,lj E 
[1 : 2^^^], we first make some useful definitions as follows. 
• Given Lj_i = /j_i, define 2"^^ binary random variables as 

^ f 1, if {(Y,,(A;|/,_i), Y,,,X2,(/,_i)) E rP\L^-i = /,-i} 
'''"' I 0, if{(Y,,(A;|/,_i),Y,„X2,(/,_i))^7;f"^lVi = /,_i} 

where k E [1 : 2"-^^]. Define a new random variable as T^ _j = J2k=i Qk,i^i, which represents that 
there are T^ ^ qualified indexes in the 2"^^ y^j -codewords. From the joint typicality ( [20], Lecture 
Note 2), for sufficiently large n the probability P{Qk,i^i = 1) can be bounded as: 

(1 - e')2-"(^i+'^(^')) < P{Qk,i_, = 1) < 2-"(^i-'^(^')), (33) 



2"-"2 



where Ji = I{Yr; Yr\X2). The expectation of T/ ^ can be expressed as E{Ti._^) = X]a,=i ^(Q 



kl 



■i-i 



1), SO it can be bounded as 

• Let Lj^i._^ ~ PLj\Lj^i{lj\lj-i), i-e. Lj^i._-^ ~ p(/j|/j_i). Similar to the definitions in [20] (Lecture 
Note 4), we can identify the random variables Lj := Lj^l.-^, Qk := Qk,L^i and T := Tl. -^, whose 
distributions depend on Lj_i in the same way as the distributions of Lj^i.^-^, Qk,i^i and T; ^ depend 
on Ij-i- From the encoding process, given Lj„i = Ij-i, conditioned on that there are t{t > 0) 
qualified indexes and lj is one of them {i.e. Qi ,i _^ = 1), obviously we have 

P{L,,i^., = lj\Qi„i,., = 1,T,,_, =t} = ]- (35) 

Similarly, given Lj_i = Ij-i, we can obtain another conditional probability as 

P{L,- ;^_, = l,\Qi^,i^_, = 0, Ti^_, = t} = 0, for t > 0. (36) 

Let M = ^E(Ti^_-^) which is assumed to be an integer without loss of generality, then the probability 
p{lj\lj-i) can be calculated as 

Pi^jl^j-i) = P{Lj,L,^, = lj\Lj-i = Ij-i) = P{Lj,i^_, = lj) 

2"-f*2 

= J2 Pi{Lj,i,_, = lA n {T,^_, = t}) 



t=0 

M-1 2"-R2 



J2 P{{Lu,-. = h) n {Ti,_, = 0) + E ^({^^v.-. = h) n {Ti,_, = t]). (37) 



t=0 t=M 
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The first term in the above equation can be bounded as 

M-l M-l 



t=0 



t=0 



= P{Ti^_, < M) 
< exp 



< exp{-(l - e')2"(«2-/i-<5(.'))-3}^ (38) 

where (a) is based on the multiplicative form of Chernoff bound ( Eq. (7) in ETll ') by setting the relative 
error as |. Besides, the second term can be upper bounded as 



2"-"2 



2"-"2 1 



E ^({^^-1 = ^.i ^ {^'.-1 = ^}) = E E^(i^^^- = h) n {T,,_, = t} n {Qi^,i^_, = i}) 



t=M 



t=M i=0 



2nR2 I 



E E^(^'-'.- = ^'^'.- = ^)^(^^v.-i = ^^iQ'.-'.-i = ^'^'.-1 = ^) 



i=Af j=0 

2n-R2 

(a) Y^ 1 



E7^(^'.^-. = l'Vi=^) 



t=Af 



< 



:^(Q'.^.-i = 1) 



(b) 1 



(39) 



where (a) is based on (l35l) and (l36l) . (6) is based on (1331) and (l34l) . Substituting the above two resuks 
into (l37l) concludes the proof of Lemma 1 . 



Appendix C 
Proof of Theorem 2 

Based on the coding scheme in Appendix A, Ci and C2 are generated by letting the distributions vr as 
Xi ~ A/'(0, Pi), X2 ~ A/'(0, P2), Yr = Yr + Zc where Z^ ~ A/'(0, (5c) and Z^ is independent of any other 
variable. Assuming the fixed power pair (Pi, P2) is used, here we only discuss the coding parameters P2 

and 6c- From (H), Rl '{R2,Sc) and Rl {R2,Sc) can be calculated as 

"P \ 

-P2 



R[ (P2, Sc) = max 
Pi (P2, 6c) = max 



C{P, + ^^],C{P, + bP2) + c' "^^ 



C aPi + 



l + Sc 
cPi 



, C(aPi + P2) + C 



l + 5c 
cPi 



Ro 



'^^YVbP, 



,c 



aPi 

I + P2 



l + 5cj' ' ' ^' \\^bc 

Next, we can observe that one achievable choice of P^ is to set be = Sn with 6* — '^ ' 

P2 = R*2 with P* = max Ic (H|^) ' ^(^2) + C (1%) }• In this case. 



g la lu aci Lie* = Op Willi 0^ = — Tp^ — and 



?(1) 



Rr{R*2, 6*c) = max <^ C(Pi + 6P2) + C 



cPi 

1 + 61. 



^^'^<r^ 



21 



and Rf\R*2, S*c) = C (tfk) ^^^ ^^ obtained. 

1) When b > 1 + (1 + c)Pi: 6*c < ■^, we have R^ = C (^^). Then we calculate R^^^ = 
C {Pi + !%)■ And the secrecy rate R, = R^^^ - i?f^ = C (Pi + ,^(™^,pj - C (^) can 
be obtained. 

2) When 1 < 6 < 1 + (1 + c)Pi.- j- < 6*c < i±^^^^, we have R* = ^(Pa) + C (tB^)- Then 
Pf^ can be calculated as Pf^ = C{Pi + bPi) - C(P2). So the secrecy rate is P, = PJ^^ - pf^ = 
C(Pi + 6P2)-C(aPi + P2). 

ij W^/zen 6 < 1.- 5*c > i±^^g^^, we have P* = ^(Ps) + C (j^)- Then PJ^^ can be calculated as 
R? = C (^) . So the secrecy rate is P, = C (^) - C (^) . 

On the other hand, Pf^ = [C(Pi) — C(aPi)]^ can be achieved by setting Sc = oo and P2 = 0, which 
may yield a higher secrecy rate under certain conditions. Hence max{Pg, Pf^} can be achieved and the 
proof of Theorem 2 is finished. 
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